CentOS 7, varsay\u0131lan g\u00fcvenlik duvar\u0131 y\u00f6netimi arac\u0131 olarak FirewallD’yi kullan\u0131r. FirewallD, dinamik bir g\u00fcvenlik duvar\u0131 y\u00f6netimi sa\u011flayan, b\u00f6lgeler (zones) ve hizmetler (services) kavramlar\u0131na dayal\u0131 kullan\u0131c\u0131 dostu bir aray\u00fcze sahiptir. Ancak, baz\u0131 sistem y\u00f6neticileri ve geli\u015ftiriciler, daha d\u00fc\u015f\u00fck seviyeli kontrol, daha fazla esneklik veya ge\u00e7mi\u015f al\u0131\u015fkanl\u0131klar nedeniyle Iptables’\u0131 tercih edebilirler. Iptables, Linux \u00e7ekirde\u011finin netfilter mod\u00fcl\u00fc i\u00e7in do\u011frudan bir aray\u00fczd\u00fcr ve paket filtreleme kurallar\u0131n\u0131 do\u011frudan y\u00f6netmenizi sa\u011flar.<\/p>\n
Bu rehber, CentOS 7 sisteminizde FirewallD’den Iptables’a g\u00fcvenli ve sorunsuz bir \u015fekilde nas\u0131l ge\u00e7i\u015f yapaca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klamaktad\u0131r. Bu ge\u00e7i\u015f, \u00f6zellikle karma\u015f\u0131k a\u011f yap\u0131land\u0131rmalar\u0131, \u00f6zel NAT kurallar\u0131 veya belirli performans gereksinimleri olan ortamlar i\u00e7in faydal\u0131 olabilir. Ge\u00e7i\u015f s\u00fcrecinde sunucunuzun g\u00fcvenli\u011fini sa\u011flamak ve eri\u015filebilirli\u011fini korumak kritik \u00f6neme sahiptir.<\/p>\n
FirewallD, modern Linux da\u011f\u0131t\u0131mlar\u0131nda varsay\u0131lan g\u00fcvenlik duvar\u0131 \u00e7\u00f6z\u00fcm\u00fc olarak yayg\u0131n bir \u015fekilde kullan\u0131lsa da, Iptables’a ge\u00e7i\u015f yapmay\u0131 d\u00fc\u015f\u00fcnd\u00fcrecek baz\u0131 nedenler bulunmaktad\u0131r:<\/p>\n
Ge\u00e7i\u015f i\u015flemine ba\u015flamadan \u00f6nce, mevcut FirewallD yap\u0131land\u0131rman\u0131z\u0131n tam bir resmini \u00e7\u0131karmak ve bu yap\u0131land\u0131rmay\u0131 yedeklemek hayati \u00f6neme sahiptir. Bu sayede, Iptables kurallar\u0131n\u0131z\u0131 olu\u015ftururken hangi portlar\u0131n ve hizmetlerin a\u00e7\u0131k olmas\u0131 gerekti\u011fini bilecek ve herhangi bir sorun durumunda geri d\u00f6nebilece\u011finiz bir referans\u0131n\u0131z olacakt\u0131r.<\/p>\n
\u0130lk ad\u0131m olarak, FirewallD’nin mevcut durumunu ve aktif b\u00f6lgelerini kontrol edin:<\/p>\n
sudo firewall-cmd --state\nsudo firewall-cmd --get-active-zones\nsudo firewall-cmd --list-all --zone=public\nsudo firewall-cmd --list-all-zones<\/code><\/pre>\nBu komutlar, FirewallD’nin \u00e7al\u0131\u015f\u0131p \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131, hangi b\u00f6lgelerin aktif oldu\u011funu ve her bir b\u00f6lgedeki kurallar\u0131 (a\u00e7\u0131k portlar, hizmetler, port y\u00f6nlendirmeleri vb.) g\u00f6sterecektir.<\/p>\n
A\u00e7\u0131k Portlar\u0131 ve Hizmetleri Belirleme<\/h3>\n
FirewallD \u00fczerinden izin verilen t\u00fcm portlar\u0131 ve hizmetleri listelemek, Iptables kurallar\u0131n\u0131z\u0131 olu\u015ftururken temel te\u015fkil edecektir:<\/p>\n
sudo firewall-cmd --list-ports --permanent\nsudo firewall-cmd --list-services --permanent<\/code><\/pre>\nAyr\u0131ca, sisteminizde hangi uygulamalar\u0131n hangi portlar\u0131 dinledi\u011fini g\u00f6rmek i\u00e7in netstat<\/code> veya ss<\/code> komutlar\u0131n\u0131 kullanabilirsiniz:<\/p>\nsudo netstat -tulnp | grep LISTEN\nsudo ss -tulnp | grep LISTEN<\/code><\/pre>\nFirewallD Yap\u0131land\u0131rmas\u0131n\u0131 Yedekleme<\/h3>\n
FirewallD yap\u0131land\u0131rmas\u0131n\u0131 bir metin dosyas\u0131na kaydetmek, gelecekte ba\u015fvurmak veya herhangi bir aksilik durumunda geri y\u00fcklemek i\u00e7in iyi bir y\u00f6ntemdir:<\/p>\n
sudo firewall-cmd --permanent --list-all-zones > \/root\/firewalld_backup.txt\nsudo cp -r \/etc\/firewalld\/ \/root\/firewalld_etc_backup<\/code><\/pre>\nBu komutlar, aktif FirewallD kurallar\u0131n\u0131 ve t\u00fcm yap\u0131land\u0131rma dosyalar\u0131n\u0131 \/root<\/code> dizini alt\u0131na yedekleyecektir.<\/p>\nFirewallD’yi Devre D\u0131\u015f\u0131 B\u0131rakma ve Kald\u0131rma<\/h2>\n
Mevcut FirewallD yap\u0131land\u0131rman\u0131z\u0131 inceleyip yedekledikten sonra, FirewallD hizmetini durdurup devre d\u0131\u015f\u0131 b\u0131rakabilir ve iste\u011fe ba\u011fl\u0131 olarak paketini kald\u0131rabilirsiniz. Bu ad\u0131mlar s\u0131ras\u0131nda sunucunuzun bir s\u00fcre korumas\u0131z kalaca\u011f\u0131n\u0131 unutmay\u0131n. Bu nedenle, bu i\u015flemleri m\u00fcmk\u00fcnse bak\u0131m penceresinde veya do\u011frudan konsol eri\u015fiminiz varken yapman\u0131z \u00f6nerilir.<\/p>\n
FirewallD Hizmetini Durdurma ve Devre D\u0131\u015f\u0131 B\u0131rakma<\/h3>\n
\u0130lk olarak, FirewallD hizmetini durdurun ve sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamas\u0131n\u0131 engelleyin:<\/p>\n
sudo systemctl stop firewalld\nsudo systemctl disable firewalld<\/code><\/pre>\nE\u011fer FirewallD’nin kesinlikle bir daha ba\u015flamamas\u0131n\u0131 istiyorsan\u0131z, hizmeti maskeleyebilirsiniz. Bu, ba\u015fka bir servisin veya kullan\u0131c\u0131n\u0131n FirewallD’yi ba\u015flatmas\u0131n\u0131 engeller:<\/p>\n
sudo systemctl mask firewalld<\/code><\/pre>\nFirewallD’nin art\u0131k \u00e7al\u0131\u015fmad\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in:<\/p>\n
sudo systemctl status firewalld<\/code><\/pre>\nFirewallD Paketini Kald\u0131rma (\u0130ste\u011fe Ba\u011fl\u0131)<\/h3>\n
E\u011fer FirewallD’yi sisteminizden tamamen kald\u0131rmak istiyorsan\u0131z, a\u015fa\u011f\u0131daki komutu kullanabilirsiniz. Bu ad\u0131m zorunlu de\u011fildir, ancak sistemde gereksiz paketleri tutmak istemiyorsan\u0131z yapabilirsiniz:<\/p>\n
sudo yum remove firewalld -y<\/code><\/pre>\nPaket kald\u0131r\u0131ld\u0131ktan sonra, ba\u011f\u0131ml\u0131l\u0131klar nedeniyle baz\u0131 ba\u015fka paketlerin de kald\u0131r\u0131lm\u0131\u015f olabilece\u011fini unutmay\u0131n. Bu ad\u0131m\u0131 dikkatlice de\u011ferlendirin.<\/p>\n
Iptables Kurulumu ve Temel Yap\u0131land\u0131rmas\u0131<\/h2>\n
FirewallD’yi devre d\u0131\u015f\u0131 b\u0131rakt\u0131ktan sonra, Iptables hizmetlerini kurma ve temel g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131z\u0131 yap\u0131land\u0131rma zaman\u0131 gelmi\u015ftir. Bu b\u00f6l\u00fcmde, sunucunuzu temel seviyede koruyacak ve gerekli hizmetlere eri\u015fim sa\u011flayacak kurallar\u0131 ad\u0131m ad\u0131m olu\u015fturaca\u011f\u0131z.<\/p>\n
Iptables Paketlerini Kurma<\/h3>\n
CentOS 7’de Iptables hizmetlerini y\u00f6netmek i\u00e7in iptables-services<\/code> paketini kurman\u0131z gerekir:<\/p>\nsudo yum install iptables-services -y<\/code><\/pre>\nIptables Hizmetlerini Etkinle\u015ftirme<\/h3>\n
Iptables hizmetlerini kurduktan sonra, sistem ba\u015flang\u0131c\u0131nda otomatik olarak ba\u015flamalar\u0131n\u0131 sa\u011flay\u0131n ve hemen ba\u015flat\u0131n:<\/p>\n
sudo systemctl enable iptables\nsudo systemctl start iptables\nsudo systemctl enable ip6tables\nsudo systemctl start ip6tables<\/code><\/pre>\nIPv6 trafi\u011fi i\u00e7in de kurallar\u0131 y\u00f6netmek \u00fczere ip6tables<\/code>‘\u0131 etkinle\u015ftirmeyi unutmay\u0131n.<\/p>\nTemel Iptables Kurallar\u0131n\u0131 Olu\u015fturma<\/h3>\n
\u015eimdi sunucunuz i\u00e7in temel Iptables kurallar\u0131n\u0131 olu\u015fturmaya ba\u015flayabiliriz. Bu kurallar, \u00e7o\u011fu sunucu i\u00e7in iyi bir ba\u015flang\u0131\u00e7 noktas\u0131d\u0131r. SSH eri\u015fimi, web sunucusu (HTTP\/HTTPS) gibi temel hizmetleri i\u00e7erir.<\/p>\n
# Mevcut t\u00fcm kurallar\u0131 ve kullan\u0131c\u0131 tan\u0131ml\u0131 zincirleri temizle\nsudo iptables -F\nsudo iptables -X\nsudo iptables -t nat -F\nsudo iptables -t nat -X\nsudo iptables -t mangle -F\nsudo iptables -t mangle -X\n\nVarsay\u0131lan politikalar\u0131 ayarla:<\/h2>\nGelen ve Y\u00f6nlendirilen trafi\u011fi engelle, Giden trafi\u011fe izin ver<\/h2>\nsudo iptables -P INPUT DROP\nsudo iptables -P FORWARD DROP\nsudo iptables -P OUTPUT ACCEPT\n\nLoopback aray\u00fcz\u00fcnden gelen trafi\u011fe izin ver (yerel ileti\u015fim i\u00e7in)<\/h2>\nsudo iptables -A INPUT -i lo -j ACCEPT\n\nHalihaz\u0131rda kurulmu\u015f ve ilgili ba\u011flant\u0131lara izin ver (stateful firewall)<\/h2>\nsudo iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT\n\nSSH (Port 22) eri\u015fimine izin ver<\/h2>\nE\u011fer SSH portunuz farkl\u0131ysa, 22 yerine o portu yaz\u0131n<\/h2>\nsudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT\n\nHTTP (Port 80) eri\u015fimine izin ver<\/h2>\nsudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT\n\nHTTPS (Port 443) eri\u015fimine izin ver<\/h2>\nsudo iptables -A INPUT -p tcp --dport 443 -j ACCEPT\n\nICMP (Ping) trafi\u011fine izin ver (iste\u011fe ba\u011fl\u0131, sorun giderme i\u00e7in faydal\u0131d\u0131r)<\/h2>\nsudo iptables -A INPUT -p icmp -j ACCEPT<\/code><\/pre>\n
Bu kurallar\u0131 uygulad\u0131ktan sonra, sunucunuzun varsay\u0131lan olarak gelen t\u00fcm trafi\u011fi engelleyece\u011fini (SSH, HTTP, HTTPS ve mevcut ba\u011flant\u0131lar hari\u00e7) unutmay\u0131n. Di\u011fer servisleriniz (veritaban\u0131, FTP vb.) i\u00e7in de benzer \u015fekilde kurallar eklemeniz gerekecektir.<\/p>\n
Iptables Kurallar\u0131n\u0131 Kaydetme<\/h3>\n
Olu\u015fturdu\u011funuz kurallar, sunucu yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda kaybolacakt\u0131r. Bu nedenle, kurallar\u0131 kal\u0131c\u0131 hale getirmeniz gerekir:<\/p>\n
sudo service iptables save\nsudo service ip6tables save<\/code><\/pre>\nBu komutlar, kurallar\u0131 \/etc\/sysconfig\/iptables<\/code> ve \/etc\/sysconfig\/ip6tables<\/code> dosyalar\u0131na kaydeder. Sistem ba\u015flang\u0131c\u0131nda iptables-services<\/code> bu dosyalardan kurallar\u0131 y\u00fckler.<\/p>\nMevcut Iptables Kurallar\u0131n\u0131 G\u00f6r\u00fcnt\u00fcleme<\/h3>\n
Kurallar\u0131n do\u011fru bir \u015fekilde uyguland\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in a\u015fa\u011f\u0131daki komutu kullanabilirsiniz:<\/p>\n
sudo iptables -L -n -v<\/code><\/pre>\nBu komut, t\u00fcm Iptables zincirlerindeki kurallar\u0131, paket ve byte say\u0131lar\u0131yla birlikte listeler.<\/p>\n
Geli\u015fmi\u015f Iptables Kurallar\u0131 ve \u0130pu\u00e7lar\u0131<\/h2>\n
Temel yap\u0131land\u0131rman\u0131n \u00f6tesinde, Iptables size \u00e7ok daha fazla esneklik ve kontrol sunar. \u0130\u015fte baz\u0131 geli\u015fmi\u015f kullan\u0131m senaryolar\u0131:<\/p>\n
Belirli IP Adreslerinden Eri\u015fime \u0130zin Verme<\/h3>\n
Belirli bir servise sadece belirli bir IP adresinden veya IP aral\u0131\u011f\u0131ndan eri\u015fime izin vermek isteyebilirsiniz. \u00d6rne\u011fin, SSH eri\u015fimini sadece kendi ofis IP adresinizle s\u0131n\u0131rlamak:<\/p>\n
sudo iptables -A INPUT -p tcp -s 192.168.1.100 --dport 22 -j ACCEPT\nDi\u011fer t\u00fcm SSH trafi\u011fini engellemek i\u00e7in bu kuraldan sonra DROP kural\u0131 gelmeli<\/h2>\nAncak varsay\u0131lan DROP politikas\u0131 oldu\u011fu i\u00e7in, sadece izin verilenler kabul edilecektir.<\/h2>\nE\u011fer varsay\u0131lan INPUT politikas\u0131 ACCEPT ise:<\/h2>\nsudo iptables -A INPUT -p tcp --dport 22 -j DROP<\/code><\/pre>\n<\/h2>\n
Bir IP aral\u0131\u011f\u0131 i\u00e7in:<\/p>\n
sudo iptables -A INPUT -p tcp -s 192.168.1.0\/24 --dport 22 -j ACCEPT<\/code><\/pre>\nPort Y\u00f6nlendirme (NAT – Network Address Translation)<\/h3>\n
Sunucunuzu bir y\u00f6nlendirici olarak kullan\u0131yor veya i\u00e7 a\u011fdaki bir servise d\u0131\u015far\u0131dan eri\u015fim sa\u011flamak istiyorsan\u0131z NAT kurallar\u0131na ihtiyac\u0131n\u0131z olacakt\u0131r. \u00d6ncelikle IP y\u00f6nlendirmeyi etkinle\u015ftirmeniz gerekir:<\/p>\n
echo \"net.ipv4.ip_forward = 1\" | sudo tee -a \/etc\/sysctl.conf\nsudo sysctl -p<\/code><\/pre>\nDaha sonra, NAT kurallar\u0131n\u0131 olu\u015fturabilirsiniz. \u00d6rne\u011fin, d\u0131\u015far\u0131dan gelen 80 portu iste\u011fini i\u00e7erideki 8080 portuna y\u00f6nlendirmek:<\/p>\n
# PREROUTING zinciri: Gelen paketler hedeflerine ula\u015fmadan \u00f6nce i\u015flenir\nsudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080<\/code><\/pre>\n\u0130\u00e7 a\u011fdaki makinelerin internete \u00e7\u0131k\u0131\u015f\u0131n\u0131 sa\u011flamak i\u00e7in (MASQUERADE):<\/p>\n
# POSTROUTING zinciri: Giden paketler kaynak adresleri de\u011fi\u015ftirilmeden \u00f6nce i\u015flenir\nsudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<\/code><\/pre>\neth0<\/code> yerine d\u0131\u015f a\u011f aray\u00fcz\u00fcn\u00fcz\u00fcn ad\u0131n\u0131 yazmay\u0131 unutmay\u0131n.<\/p>\nZincirler ve Hedefler<\/h3>\n
Iptables, paketleri belirli zincirler (chains) arac\u0131l\u0131\u011f\u0131yla i\u015fler: INPUT<\/code> (sunucuya gelen), OUTPUT<\/code> (sunucudan giden), FORWARD<\/code> (sunucu \u00fczerinden y\u00f6nlendirilen). Ayr\u0131ca PREROUTING<\/code> ve POSTROUTING<\/code> gibi NAT ve mangle tablolar\u0131na \u00f6zg\u00fc zincirler de bulunur. Her kural, bir hedef (target) ile biter: ACCEPT<\/code> (paketi kabul et), DROP<\/code> (paketi sessizce d\u00fc\u015f\u00fcr), REJECT<\/code> (paketi reddet ve hata mesaj\u0131 g\u00f6nder), LOG<\/code> (paketi logla) veya kullan\u0131c\u0131 tan\u0131ml\u0131 bir zincire atlama.<\/p>\nKullan\u0131c\u0131 tan\u0131ml\u0131 zincirler, karma\u015f\u0131k kural setlerini daha d\u00fczenli hale getirmek i\u00e7in kullan\u0131labilir. \u00d6rne\u011fin, “web-rules” ad\u0131nda bir zincir olu\u015fturup t\u00fcm web ile ilgili kurallar\u0131 buraya toplayabilirsiniz:<\/p>\n
sudo iptables -N web-rules\nsudo iptables -A web-rules -p tcp --dport 80 -j ACCEPT\nsudo iptables -A web-rules -p tcp --dport 443 -j ACCEPT\nsudo iptables -A INPUT -j web-rules<\/code><\/pre>\nSonu\u00e7 ve S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h2>\n
CentOS 7’de FirewallD’den Iptables’a ge\u00e7i\u015f s\u00fcreci, dikkatli planlama ve ad\u0131m ad\u0131m uygulama gerektiren bir i\u015flemdir. Bu rehberde, mevcut FirewallD yap\u0131land\u0131rman\u0131z\u0131 yedeklemekten, FirewallD’yi devre d\u0131\u015f\u0131 b\u0131rak\u0131p kald\u0131rmaya ve Iptables’\u0131 kurup temel kurallar\u0131n\u0131 yap\u0131land\u0131rmaya kadar t\u00fcm \u00f6nemli ad\u0131mlar\u0131 ele ald\u0131k. Iptables’\u0131n sa\u011flad\u0131\u011f\u0131 d\u00fc\u015f\u00fck seviyeli kontrol ve esneklik, belirli senaryolarda FirewallD’ye g\u00f6re avantajlar sunabilir.<\/p>\n
Unutulmamal\u0131d\u0131r ki, g\u00fcvenlik duvar\u0131 kurallar\u0131n\u0131 yanl\u0131\u015f yap\u0131land\u0131rmak sunucunuzun a\u011f eri\u015fimini tamamen kesebilir. Bu nedenle, her kural de\u011fi\u015fikli\u011finden sonra dikkatlice test etmek ve m\u00fcmk\u00fcnse sunucuya fiziksel veya sanal konsol eri\u015fiminiz varken bu i\u015flemleri ger\u00e7ekle\u015ftirmek b\u00fcy\u00fck \u00f6nem ta\u015f\u0131r. G\u00fcvenli\u011finiz i\u00e7in her zaman en az ayr\u0131cal\u0131k prensibini uygulay\u0131n ve sadece gerekli olan portlar\u0131 ve hizmetleri a\u00e7\u0131n.<\/p>\n
S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n\n- 1. FirewallD’den Iptables’a ge\u00e7i\u015f performans\u0131 art\u0131r\u0131r m\u0131?<\/dt>\n
- \u00c7o\u011fu standart kullan\u0131m senaryosunda, FirewallD ile Iptables aras\u0131nda g\u00f6zle g\u00f6r\u00fcl\u00fcr bir performans fark\u0131 yoktur. Ancak \u00e7ok y\u00fcksek trafikli veya karma\u015f\u0131k kural setleri olan \u00f6zel durumlarda, Iptables’\u0131n daha do\u011frudan \u00e7ekirdek etkile\u015fimi nedeniyle teorik olarak hafif bir performans avantaj\u0131 olabilir.<\/dd>\n
- 2. Iptables kurallar\u0131m\u0131 yanl\u0131\u015f yap\u0131land\u0131r\u0131rsam ne olur?<\/dt>\n
- Yanl\u0131\u015f yap\u0131land\u0131r\u0131lm\u0131\u015f Iptables kurallar\u0131, sunucunuzun a\u011f eri\u015fimini tamamen kesebilir. \u00d6zellikle SSH portunu yanl\u0131\u015fl\u0131kla engellemek, uzaktan eri\u015fiminizi kaybetmenize neden olabilir. Bu durumda, sunucuya fiziksel konsol veya sanalla\u015ft\u0131rma platformu \u00fczerinden eri\u015ferek kurallar\u0131 d\u00fczeltmeniz gerekir. Bu riski minimize etmek i\u00e7in, kurallar\u0131 kaydetmeden \u00f6nce test edin ve her zaman bir kurtarma plan\u0131n\u0131z olsun.<\/dd>\n
- 3. Ge\u00e7i\u015f s\u0131ras\u0131nda sunucum eri\u015filemez hale gelirse ne yapmal\u0131y\u0131m?<\/dt>\n
- E\u011fer Iptables kurallar\u0131n\u0131 uygulad\u0131ktan sonra sunucunuz eri\u015filemez hale gelirse, hemen fiziksel veya sanal konsol eri\u015fimi \u00fczerinden sunucuya ba\u011flan\u0131n. Mevcut Iptables kurallar\u0131n\u0131
sudo iptables -F<\/code> komutu ile temizleyebilir, ard\u0131ndan do\u011fru kurallar\u0131 tekrar uygulayabilirsiniz. En iyi pratik, ba\u015flamadan \u00f6nce bir sanal makine anl\u0131k g\u00f6r\u00fcnt\u00fcs\u00fc (snapshot) almak veya konsol eri\u015fimine sahip olmakt\u0131r.<\/dd>\n- 4. Iptables kurallar\u0131m\u0131 nas\u0131l yedekleyebilirim?<\/dt>\n
- Iptables kurallar\u0131n\u0131z\u0131
sudo iptables-save > \/root\/iptables_backup.txt<\/code> komutu ile bir dosyaya yedekleyebilirsiniz. Bu dosyay\u0131 daha sonra sudo iptables-restore < \/root\/iptables_backup.txt<\/code> komutu ile geri y\u00fckleyebilirsiniz.<\/dd>\n- 5. CentOS 8'de de bu ad\u0131mlar ge\u00e7erli mi?<\/dt>\n
- CentOS 8 (veya RHEL 8), varsay\u0131lan olarak FirewallD'yi kullanmaya devam eder. Iptables'\u0131 kullanmak isterseniz, bu rehberdeki temel ad\u0131mlar (FirewallD'yi devre d\u0131\u015f\u0131 b\u0131rakma,
iptables-services<\/code> kurma) benzer \u015fekilde uygulanabilir. Ancak, sistemd servis isimleri veya baz\u0131 paket ba\u011f\u0131ml\u0131l\u0131klar\u0131 k\u00fc\u00e7\u00fck farkl\u0131l\u0131klar g\u00f6sterebilir. Her zaman kulland\u0131\u011f\u0131n\u0131z CentOS s\u00fcr\u00fcm\u00fcne \u00f6zg\u00fc dok\u00fcmantasyonu kontrol etmeniz \u00f6nerilir.<\/dd>\n<\/dl>\n<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Giri\u015f: CentOS 7’de FirewallD’den Iptables’a Ge\u00e7i\u015f\n CentOS 7, varsay\u0131lan g\u00fcvenlik duvar\u0131 y\u00f6netimi arac\u0131 olarak FirewallD’yi kullan\u0131r.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-35380","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\n
Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f\" \/>\n<meta property=\"og:description\" content=\"Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f CentOS 7, varsay\u0131lan g\u00fcvenlik duvar\u0131 y\u00f6netimi arac\u0131 olarak FirewallD'yi kullan\u0131r.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-28T22:41:32+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"12 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Giri\u015f: CentOS 7’de FirewallD’den Iptables’a Ge\u00e7i\u015f\",\"datePublished\":\"2025-11-28T22:41:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/\"},\"wordCount\":1850,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/\",\"name\":\"Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-11-28T22:41:32+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Giri\u015f: CentOS 7’de FirewallD’den Iptables’a Ge\u00e7i\u015f\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/","og_locale":"tr_TR","og_type":"article","og_title":"Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f","og_description":"Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f CentOS 7, varsay\u0131lan g\u00fcvenlik duvar\u0131 y\u00f6netimi arac\u0131 olarak FirewallD'yi kullan\u0131r.","og_url":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-11-28T22:41:32+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"12 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Giri\u015f: CentOS 7’de FirewallD’den Iptables’a Ge\u00e7i\u015f","datePublished":"2025-11-28T22:41:32+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/"},"wordCount":1850,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/","url":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/","name":"Giri\u015f: CentOS 7'de FirewallD'den Iptables'a Ge\u00e7i\u015f - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-11-28T22:41:32+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/giris-centos-7de-firewalldden-iptablesa-gecis\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Giri\u015f: CentOS 7’de FirewallD’den Iptables’a Ge\u00e7i\u015f"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35380","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=35380"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35380\/revisions"}],"predecessor-version":[{"id":35381,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/35380\/revisions\/35381"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=35380"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=35380"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=35380"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}